security and command block

[guigeek]

Hello,
for security reasons, we would like to block the "cmd" command for standard users.
However, wapt uses it as a user account for all session setup.
Is there an alternative?
Thank you for your help!
Have a good day,
Guillaume

[guigeek]

Person ?

[sfonteneau]

Oops, sorry, your message seems to have slipped through the cracks.

After a quick look, it's mainly the `run` function that calls `cmd`. Blocking `cmd` shouldn't be a problem the rest of the time.
You just shouldn't run `run` in the session setup.

[dcardon]

Hi again Guillaume,

you can call `subprocess.check_output('cmd',shell=False)` which should prevent launching `cmd` commands in session setup.

Regards,

Denis

[guigeek]

Thank you, I'll try that!